Buyer Onboarding

The public integration checklist for connecting an OpenRTB buyer to CloudX.

Use this page to scope an OpenRTB integration before exchanging credentials or test traffic. You provide the buyer endpoint URLs; CloudX configures them and any authentication details privately. The protocol contract stays public here.

Capability matrix

AreaPublic contract
InventoryMobile in-app inventory. Website, CTV, audio, and other channels are outside this public contract.
DisplayHTML or MRAID for banner, MREC, interstitial, and rewarded placements.
VideoVAST for interstitial and rewarded placements.
NativeNative is available for some publisher integrations, but not through the standard buyer endpoint. Contact CloudX to confirm Native support for your integration.
App OpenCloudX rendering is endpoint-dependent. Eligible endpoints support fullscreen HTML/MRAID or VAST creatives; CloudX confirms support during onboarding.
ProtocolOpenRTB 2.5 or 2.6, configured per endpoint.
RegionsProduction auction services operate in the United States, Europe, Asia-Pacific, and South America. CloudX confirms the regions enabled for your integration.
TransportHTTPS POST with application/json. Keep connections alive.
AuthenticationEndpoint-specific, when required. Credentials or static headers are exchanged out of band and never published in this guide.
Request shapeOne imp per request. The same opportunity can reach your endpoint in multiple auction rounds.
Auction integritySupported integrations can rank bids inside an isolated, attestable Trusted Execution Environment. Optional TEE features are coordinated during onboarding.
TimeoutRead tmax on every request. The default is 1400 ms, but CloudX can configure it per endpoint.
CurrencyUSD CPM only. Non-USD bid responses are rejected.
CompressionUncompressed, gzip, or zstd request bodies by agreement; gzip or zstd responses when advertised.
Test trafficIntegration traffic is marked with test: 1. CloudX coordinates controlled test traffic before launch.
PrivacyTCF, GPP, US Privacy, GPC, DNT, and LMT signals can affect each request. See Privacy for OpenRTB Buyers.
MeasurementSupported SDKs attempt OM SDK measurement for CloudX-rendered HTML and VAST. Confirm certification parity for the shipped SDK version before promising coverage; see Viewability.

Regional availability does not promise traffic volume, QPS, latency, or an SLA. Confirm commercial and capacity commitments in your agreement.

What CloudX needs from you

Provide these details to your CloudX account manager:

  • Production and test HTTPS endpoint URLs
  • OpenRTB 2.5 or 2.6
  • Supported display and video formats
  • Required authentication headers or query parameters
  • Whether request bodies should be uncompressed, gzip, or zstd
  • Technical and operations contacts

Build against the contract

  1. Implement the Bid Requests and Bid Responses contracts.
  2. Apply every privacy signal on the request; never infer consent from the presence of an advertising ID.
  3. Return HTML/MRAID or VAST that passes the Creative Specification.
  4. Make nurl, burl, and lurl handlers idempotent and tolerant of asynchronous, best-effort delivery.
  5. Verify the publisher path using Supply Transparency.

Launch checklist

  • Accept each HTTP request as a separate bid opportunity, even when an earlier round used the same id.
  • Respond before the request’s tmax; return 204 or an empty seatbid when not bidding.
  • Echo bidresponse.id and bid.impid, send one seat with one bid, and bid in USD.
  • Include a stable crid and at least one non-empty adomain on every bid.
  • Honor bidfloor, bcat, badv, privacy signals, and your own policy controls.
  • Validate uncompressed and agreed compressed request bodies.
  • Validate every response encoding your endpoint plans to send.
  • Render each supported creative type on a real device.
  • Confirm expected nurl, burl, and lurl outcomes without assuming exactly-once delivery.
  • On CloudX-settled requests, reconcile app.publisher.id, app-ads.txt, and sellers.json with source.schain in OpenRTB 2.6 or source.ext.schain in 2.5.
  • Complete controlled test: 1 traffic before production enablement.